Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b91c78da-157e-3721-826d-7aacdc164a3d.roa
File: b91c78da-157e-3721-826d-7aacdc164a3d.roa (raw, json)
Hash identifier: ZSYawPDZuYPXo2Gao/SIilndqxXql4NjzyEdT+rlvVo=
Subject key identifier: 60:82:8F:47:50:4C:5A:95:E8:2F:EC:E9:45:55:4E:2D:BB:D0:38:B8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10F48E1BE21807E42B2980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b91c78da-157e-3721-826d-7aacdc164a3d.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 71.239.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:f4:8e:1b:e2:18:07:e4:2b:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=3b66161c-e954-4da7-9aa2-5ce6ede9d08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:4c:18:e9:af:65:77:4e:ee:fa:13:7d:73:
6a:fb:52:47:f0:64:6a:cf:3c:2e:b6:5f:3b:e7:9c:
9a:c1:7b:75:4d:d1:24:23:12:1a:6c:d9:d4:40:fd:
b6:e4:e4:2b:16:7e:60:1f:22:18:ba:89:9a:4c:64:
7f:76:91:c4:af:14:ac:ff:2f:fd:ae:9e:b3:3e:e0:
a8:08:dd:97:41:eb:fa:e5:d5:b6:d9:7c:4d:c1:c3:
05:07:b9:c2:7a:db:94:62:a4:54:03:6f:38:46:0b:
0c:87:f6:82:e4:d1:bd:fa:11:e9:d1:77:a9:aa:23:
7b:04:b0:6f:60:6c:ac:82:84:90:0d:61:ef:cc:95:
65:25:ff:0b:25:23:65:b8:3a:a0:a9:d1:80:71:61:
96:40:f1:b2:8e:17:e4:e8:66:0e:04:e7:20:64:7a:
8f:65:36:b6:46:3a:47:80:63:34:89:78:14:cf:db:
cf:c3:92:6a:6f:12:83:36:91:00:bf:9e:fb:d6:24:
c3:63:bd:db:98:0b:3b:d7:65:b3:f0:96:41:ef:ef:
53:59:b3:ec:3d:2e:d6:6f:dc:7b:2a:54:b5:61:e1:
17:e4:a6:a6:44:b7:fb:8d:07:a1:8d:d6:fc:d6:49:
81:34:b5:a8:30:93:b4:7b:45:59:af:d9:cc:6a:81:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:82:8F:47:50:4C:5A:95:E8:2F:EC:E9:45:55:4E:2D:BB:D0:38:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b91c78da-157e-3721-826d-7aacdc164a3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.239.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:71:fa:42:a2:54:d5:e1:d4:52:2e:b9:a0:56:a9:a2:98:84:
2e:9a:df:67:ef:fe:70:15:22:d1:8b:21:86:a7:d2:18:be:5c:
71:e1:9d:d3:2f:e0:84:09:19:3a:af:0e:95:76:9e:64:4b:1e:
ab:41:65:7e:0c:78:ce:98:dd:a9:3e:77:ad:1c:f5:24:a7:47:
d1:2b:99:ae:21:9c:df:9b:33:15:98:cc:91:e7:ff:1f:9d:16:
b0:2d:5e:6c:21:27:41:86:1e:06:d5:1b:db:ed:cb:b0:d6:af:
6b:43:0c:d3:68:1f:3b:49:d3:25:c5:5e:ff:db:d8:07:7f:ef:
b1:0f:e0:3d:b1:86:02:97:e9:a2:24:b3:f7:29:4e:a3:73:05:
a3:89:67:cf:d2:53:22:d4:40:e5:b1:fb:f6:12:b0:fa:ca:b9:
e8:8b:7d:08:50:42:d5:3e:48:88:b2:ca:b0:1c:18:06:88:6a:
4e:72:95:33:2a:31:6d:d1:8a:6e:ff:1b:95:3e:40:c4:57:d7:
10:00:b5:22:0a:d5:dc:4e:78:f2:8f:08:77:1d:a0:7a:07:fa:
95:06:63:0d:e4:1f:9b:cf:82:5d:5a:06:83:b0:16:a9:0d:df:
6f:d8:b6:f8:3b:33:06:4e:ed:64:0e:d5:2a:78:a5:49:2d:4f:
1c:5c:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:50:25 2025 by rpki-client